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ABSTRACT 


This  paper  discusses  the  emerging  ways,  means,  and  ends  of  offensive  Information 
Warfare  (IW).  IW  is  seen  as  being  conducted  in  a  distinctly  unique  dimension, 
however,  inextricably  linked  to  time,  space,  and  physical  force.  The  context  of 
major  geo-social  transformation  from  the  proliferation  of  powerful  information 
technologies  is  shown  as  an  underlying  theme  for  change  in  joint  military 
operations.  The  nature  of  IW  is  viewed  as  interwoven  in  a  highly  interactive 
geo-social-technical  tapestry— including  various  layers  of  organized  conflict 
("war  organisms"),  represented  by  an  overall  system  of  functional  subsystems 
(physical,  mental,  spirit).  The  relationships  among  physical  force,  information, 
and  will  are  deemed  essential  to  leveraging  information  for  appropriate  and 
useful  operational  effects.  The  nature  of  IW  and  the  relationships  among  the 
functional  subsystems  are  presented  as  creating  potential  for  a  new  level  of 
warfare  synergy.  Controlling  an  "information-  continuum"  of  information- 
knowledge — capability  is  seen  as  the  key  to  generating  information-based  military 
power.  New  potential  high  value  target  sets  are  revealed  that  demand  unique 
understanding  and  orientation — including  a  full  development  of  IW  beyond  the 
current  military  interpretation  of  Command  &  Control  Warfare  (C2W) .  A 
comprehensive  view  of  offensive  IW  is  presented  in  terms  of  target  development, 
weaponeering,  military  options,  and  organizing  for  action. 
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"in  an  important  sense  this  world  of  ours  is  a  new  world,  in  which 
the  unity  of  knowledge,  the  nature  of  human  coimunities,  the  order 
of  society,  the  order  of  ideas,  the  very 

culture  have  changed  and  will  not  return  to  what  they  have  been  in 
the  past...  One  thing  that  is  new  is  the  prevalence  of 
changing  scale  and  scope  of  change  itself,  so  that  the  world  alters 
as  we  walk  in  it...  What  is  new  [are]  the  techni^es,  ^o^g  which 
and  by  which  we  live,  multiply  and  ramify,  so  that  the  whole  world 
is  bound  together  by  communication...  The  global 
world  is  new;  our  knowledge  of  and  sympathy  with  remote  and 
peoples,  our  involvement  with  them  in  ^ 

Commitment  to  them  in  terms  of  brotherhood. ..  ...this  is 
that  we  have  come  to  live  in.  The  very  difficulties  which  it 
presents  derive  from  a  growth  in  understanding,  in  ia 

To  assail  the  changes  that  have  unmoored  us  from  the  past  is 
futile...  We  need  to  recognize  change  and  learn  what  resources 

have . " 


-  J.  Robert  Oppenheimer,  1955 


WAGING  INFORMATION  WARFARE;  MAKING  THE  CONNECTION  BETWEEN  INTORMATION 

AND  POWER  IN  A  TRANSFORMED  WORLD 


REACHING  FOR  THE  ESSENTIAL  CONNECTION 
Information  is  about  connections: 

—  connecting  raw  information  to  a  worthwhile  representation, 

—  connecting  a  sense  to  a  perception  and  then  to  action, 

—  connecting  a  sender  to  a  receiver, 

—  connecting  many  people  to  each  other  in  organizations, 

—  connecting  economic  and  cultural  systems  to  an  information  basxs, 

—  connecting  neurons  and  a  brain  to  form  mental  capacity, 

—  connecting  an  organism's  mind  to  it's  body  and  spirit, 

~  connecting  machines  and  the  people  they  simulate  and  assist, 

—  connecting  technology  and  human  response. 

Ultimately  it'e  about  connecting  information  itself  to  power.  It  is  this  that  is  of 
central  concern  in  all  warfare  and  especially  in  Information  Warfare,  The  environment 
of  the  Information  Age  and  the  very  nature  of  information  requires  a  holistxc  view  that 
there  is  a  personal,  human  level  to  information,  very  much  connected  to  the  concept  of 
Information  Warfare.  Information  technology  is  therefore  seen  as  a  unique  tool  that  is 
inseparable  from  the  human  social  system^  as  a  whole.  This  is  the  constant  in  an  era  of 
global  transformation.  Because  information  speed,  coverage,  and  capacity  have  greatly 
increased,  geo—social— technical  complexity  is  also  multiplying  yielding  both  significant 
difficulties  and  opportunities  in  warfare.  Through  an  understanding  of  how  the  nature 
of  information  is  manifested  in  this  context,  the  United  States  armed  forces  can  wield 
extraordinary  power — the  essential  connection  in  war,  conflict  resolution  and  deterrence. 


THE  INFORMATION  AGE 

Pervasive  geo-social  change  is  being  driven  by  the  explosive  growth  and  convergence 
of  related  information  technologies — computers,  telecommunications,  and  other  information 
systems.  The  global  proliferation  of  these  technologies  and  their  applications  have 
created  a  new  ”info— sphere. Vice  President  A1  Gore  has  said,  "There  is  no  longer  any 
doubt  that  [computers  and  telecommunications  networks]  will  reshape  human  civilization 
even  more  quickly  and  more  thoroughly  than  did  the  printing  press."  Speaker  of  the  House 
Newt  Gingrich  says  that  "the  scale  of  change  in  technology  will  be  so  large  that  it  is 
a  change  in  kind."  Economists  and  corporate  management  have  embraced  this  tra.ns formation 
into  what  economic  expert  Peter  Drucker  calls  the  "knowledge-based  society."^  Expansion 


of  the  infosphere  is  dissolving  traditional  boundaries,  creating  new  complex  relation¬ 
ships  and  interactivity.*  The  pace  of  change  seems  faster  than  ever  before.^ 

Drucker's  wisdom  is  particularly  enlightening:  "...[information]  technology  is 
important  today  precisely  because  it  unites  both  the  universe  of  doing  and  that  of 
knowing,  connects  both  the  intellectual  and  the  natural  histories  of  man."*  Furthermore, 
the  technological  trend  is  interwoven  with  other  geo-social  trends,  ambitions  and 
tendencies  in  a  grand  tapestry.  The  capability  to  process,  deliver  and  access  huge 
amounts  of  information*  raises  the  average  potential  level  of  individual  knowledge  and 
number  of  available  perspectives  (whether  computational  or  philosophical  perspectives). 
Expansive,  networked  telecommunications  provide  heretofore  uncommon  potential  to  create 
new  forums  of  extraordinary  reach— to  vastly  multiply  human  interconnections. 

These  developments  are  enablers  of  any  activity  that  is  based  on  ideas  and/or  human 
"interconnectedness"  and  "relationalism. "*  This  creates  both  enormous  potential 
complexity  ^  potential  ability  to  derive  simple,  essential  information  and  ideas  from 
complex  issues  and  sets  of  information.  It  is  further  vital  to  recognize  that  all  these 
trends  and  potentials  are  meaningless  except  in  a  human  context— that  is,  the  conversion 
and  application  of  information  into  ideas  &  knowledge,  and  then  into  utility  or 
capability.  The  technologies,  as  breathtaking  as  they  may  sometimes  appear,  are  only 
tools  created  by  humans  for  potential  human  purposes— manifested  in  social  activity, 
including  conflict  and  warfare.  This  creates  additional  conditions  for  alterations  in 
the  fabric  of  social  order.  The  increased  potential  both  for  complexity  and  derived 
simplicity  or  information  essence,  the  global  expansion  of  human  interaction  and 
knowledge,  and  their  impact  on  the  entire  geo-social  tapestry  make  the  "Information  Age" 
a  fundamental  transformation. 

An  extreme  debate  about  whether  this  transformation  is  a  true  revolution  or  a  stage 
of  an  evolutionary  process  may  be  counterproductive.  We  can  see  the  Information  Age  as 
a  revolution  in  geo-social  intercourse  scope  and  scale,  or  we  can  focus  on  the  evolution¬ 
ary  effects — it  doesn't  matter— as  long  as  we  recognize  it's  roots  and  appreciate  it's 
nature.  The  key  issues  for  the  United  States  military  are  that  there  is  definite  change 
going  on,  that  it  is  generally  global  in  scope  and  it  affects  all  segments  of  the  social 
system,  that  it  therefore  changes  our  operating  environment  and  the  character  of  some  of 
our  adversaries,  and  that  it  provides  new  capabilities-all  of  which  apparently  demand 
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new  ways  of  approaching  our  businesa—that  is:  military  power  for  national  security.  To 
deal  with  this  highly  significant  set  of  changes — indeed,  to  capitalize  on  their  very 
nature — requires  new  or  adjusted  frames  of  reference  which  allow  a  clearer  understanding 
of  the  transformation  in  our  own  terms  and  provide  the  necessary  vantage  points  for 
positive  change,  adaptation,  and  innovation  to  meet  new  challenges  and  fulfill  new 
potential. 

Meeting  the  distinct  challenge  of  pervasive  geo-social-technical  change  must  be 
firmly  founded  in  the  fundamental  requirement  of  providing  military  power  for  national 
security.  Therefore,  we  must  examine  what  the  entire  emerging  geo-social-technical 
context  means  for  national  security  and  what  it  means  to  potential  military  power. 

THE  NATURE  OF  INFORMATION  WARFARE  and  SYNERGY 

Information  is  the  capital  of  the  mental  &  intellectual  realm— a  higher  order  human 
dimension.  Machines  may  use  information  intensively,  but  only  as  they  are  designed  to 
simulate  an  enlarged,  accelerated,  collectivized  or  otherwise  enhanced,  but  fundamentally 
similar,  human  function.  Human  mental  function  attempts  to  convert  raw  information  into 
Tcnnwledoe  and  then  capability  in  an  "information  continuum. .!L  Information-based  machine 
systems  are  merely  extensions  of  and  assistants  to  this  function. 

All  humans  engaged  in  war— individually  or  collectively  in  organizations, 
unassisted  or  enhanced  by  machines — constitute  what  can  be  called  and  modeled  as  a  "war 
organism."  This  human-based  war  organism  consists  of  three  basic  functions  and 
corresponding  functional  subsystems:  physical,  mental  and  spiritual.  Table  I,  below, 
provides  a  simple  expansion  of  this  model* 


Functional  subsystem: 
"organic”  concept : 
war  parallel: 


Table  I,  "The  War  Organism"  Model 
physical  mental 

skeleto-muscular  neurologic 

mass,  firepower  C2/C4I 


spiritual 

psychologic+ 

will,  cohesion,  etc. 


Information  flows  through,  and  is  processed  by,  the  mental  subsystem  but  the  war 
organism  is  an  holistic,  interactive,  interwoven  system  of  subsystems.  It  exists  on  all 
levels — micro  (unassisted  individuals)  to  macro  (technologically  enhanced  organizations) - 
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-which  multiplies  the  potential  for  interactive  complexity  in  larger  and  more  collective 
organisms. 

Clausewitz,  who  first  reminds  us  that  war  is  an  act  of  force  to  compel  the  will  of 
an  enemy,  says  that  "intellect  is  a  clear,  continuous  vital  contribution,"*  inferring  the 
connection  between  intellect  and  will.  Sun  Tzu  spoke  of  subduing  the  adversary's  will 
as  "the  acme  of  skill."*  Indeed,  Clausewitz  recognizes  the  fundamental  (even  if  increas¬ 
ingly  macro)  human  nature  of  war  as  "nothing  but  a  duel  on  a  larger  scale."’®  Further¬ 
more,  as  the  will,  emotion  and  spirit  reside  together,  Clausewitz  recognized  their 
relationship  to  an  information  continuum;  "The  step  is  always  long,"  he  states,  "from 
cognition  to  volition,  from  knowledge  to  ability.  The  most  powerful  springs  of  action 
in  men  lie  in  his  emotions.".  Sun  Tzu  wrote  at  great  length  about  the  informational 
impact  on  the  will  of  the  enemy.  His  work  is  traditionally  interpreted  as  emphasizing 
intelligence  and  deception,  however,  in  a  larger  sense  it  also  describes  the  men¬ 
tal/intellectual  clash  that  manifests  the  conflict  of  wills. 

The  enduring  paradigm  that  war  is  a  fundamentally  human  activity,  given  to  complex 
interaction  of  two  or  more  war  organisms,  to  compel,  subdue,  or  otherwise  influence  the 
will  of  the  adversary  is  central,  then,  to  the  nature  of  IW.  Physical  warfare 
concentrates  on  compelling  the  enemy's  will  by  diminishing  his  physical  warmaking 
ability.  Information  Warfare  not  only  bears  on  an  adversary's  will  through  influence  in 
his  mental/intellectual  subsystems.  If  applied  correctly  it  can  have  tremendous  effects 
in  the  adversary's  information-based  infrastructure  and  strategic  cohesion  that  sustains 
him,  with  consequent  bearing  on  his  will.  Furthermore,  the  inherent  non-lethal  nature 
of  pure  IW  makes  new  options  available  for  for  disrupting  an  adversary  s  entire 
interactive  societal  system  by  disabling  key  info-based  subsystems.  In  this  context, 
broad  physical  factors  and  broad  mental  &  informational  factors  are  synergized  to  create 
greater  total  power. 

Thus,  Information  Warfare  may  be  applied  in  three  roles  to  control  information  and 


therefore  gain  power; 

1)  as  an  enabler  or  enhancer  of  own  physical  force,  or  by  diminishing  the  adver¬ 
sary's  physical  force; 

2\  as  direct  attacks  against  adversary  will;  and  w  ..  -vv, 

3)  against  adversary  information  not  directly  related  to  physical  force,  but  with 
a  definite  bearing  on  the  adversary's  overall  ability  and/or  will 
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The  first  role  includes  the  traditional  offensive  warfare  information  loop  of 

r-^ronnaissanr^-surveillance-taraetina-attack-assessment**,  traditional  operation  security 

(OPSEC),  and  most  traditional  forms  of  electronic  warfare  (EW) .  The  second  role  includes 
traditional  psychological  operations  (PSYOP).  Traditional  military  deception  falls 
within  either  of  the  first  two  roles.  The  third  role  is  largely  undeveloped,  but  ripe 
with  potential  in  the  Information  Age. 


FULLY  DEVELOPED  INFORMATION  WARFARE 

The  "infosphere"  is  the  dimensional  link  for  the  mental  realm  to  the  physical  and 
spiritual  realms.  Information  systems  (even  if  temporarily  independent  of  human 
interaction,  as  in  a  f ire-and-forget  weapon)  are  tools  for  work  along  the  information 
continuum.  Generating  information-based  power  comes  from  controlling  this  continuum. 
The  way  to  maximum  power  is  information  access  and  action  to  control  it.  Although 
thorough  awareness  of  information  is  an  enabler  of  power,  the  control  of  information  can 
yield  direct  power  over  information-based  systems,  and  powerful  indirect  leverage  on  the 
adversary  organism.  The  control  of  information  in  any  war  organism,  then,  is  a  natural 
basis  of  generating  higher  military  power  through  Information  Warfare  (IW). 

CJCS  Memorandum  of  Policy  30  merges  OPSEC,  EW,  PSYOP,  and  deception  under  the 
relatively  new  discipline  of  Command  and  Control  Warfare  (C2W)  and,  based  upon  a 
classified  DOD  directive,  states  that  "C2W  is  the  military  strategy  that  implements 
Information  Warfare  on  the  battlefield."'*  (Service  policies  have  quickly  fallen  into 
line.)  Two  major  drawbacks  exist  in  this  approach.  First,  it  limits  IW  to  the 
traditional  battlefield.  Secondly,  it  neglects  the  third  role  of  IW  —applications  not 
directly  related  to  physical  force. 

The  infosphere  has  far  surpassed  traditional  battlefield  boundaries— physical  as 
well  as  geo-political.  Not  only  do  new  information-based  targets  within  traditional 
objectives  become  relevant,  but  new  ways  of  access  also  appear.  The  options  to  national 
security  and  military  strategies  are  not  limited  to  C2W.  USAF  Lieutenant  Colonel  Donald 
E.  Ryan,  Jr.,  in  a  recent  article  entitled,  "Implications  of  Information-Based  Warfare," 


correctly  states: 

"We  have  reached  a  point  where  technology  which  supported  combat  has  become  a 
weapon  in  its  own  right.  Again,  under  technological  pressure,  instr^ents  of 
are^changing  and  leading  to  a  concomitant  need  to  change  the  methods  of  war. 
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since  information  is  the  only  resource  that  can  exist  simultaneously  in  more  than 
one  place,  and  can  be  moved  at  the  speed  of  light,  it  can  transcend  the  time  &  space 
limits  of  physical  force.  This  fact  necessarily  transforms  the  principles  of  concentra¬ 
tion  and  economy  of  force.  Operational  tempo  will  be  significantly  altered,  and  not  just 
in  the  physical  realm,  but  in  the  synergistic  application  of  all  three  IW  roles.  Whole 
new  slants  emerge  for  the  definitions  of  depth  and  reach.  A  new  information-based  view 
of  the  indirect  approach  results.  [Liddell  Hart  states:  the  "idea  of  the  indirect 
approach  is  closely  related  to  all  problems  of  mind  upon  mind  the  most  influential 
factor  in  human  history.*^]  Indeed,  it  is  probable  from  a  pure  IW  standpoint  that  the 
boundaries  of  rear,  close,  and  deep  areas  disappear.  Many  IW  targets  will  likely  offer 
effects  that  transcend  the  functional  levels  of  war.  New  strategic  and  operational 
options  for  deterrence,  pre-emption,  conflict,  termination,  and  peace  maintenance  are 
created.  IW  includes  C2W,  but  is  much,  much  more. 


A  SAMPLE  OF  IW  TARGET  SETS 

Examining  potential  targets  opens  a  vista  for  new  options  in  warfare,  conflict 
resolution,  and  deterrence.  IW  targets  appear  available  in  most,  if  not  all, 
information-based  subsystems  of  any  war  organism.  These  information-based  subsystems  can 
be  divided  into  four  general  categories;  Table  II  illustrates: 


Table  II.  Information-Based  Subsystems /Target s^^ 

Military/  Organism  Leadership/  Economic/ 

Paramilitary  Policymaking  Commercial  Utility 


<  - C4I 

<  - 


maintenance 
supply  &  logistics 
training 

< - 

netted  formations 
platforms  (note) 


- - 

- transport - 

< 

state  news  media 


- individuals 

agencies 


telecomms 


- electricity - 

private  news  media 

finance 

roanu  f  ac tur ing 

oil 


business  units 


> 

> 

> 


water 

- > 

forums 


Note:  Used  here,  "platforms"  include  those  war  orgamsms  embedded  in  the  larger  military  system,  e.g.  vehicles,  combat  systems,  smart  weapons 
&  sensors,  and  countless  information-action  loops. 


Table  II  is  neither  perfect  nor  comprehensive — it  is  generated  mostly  for 
illustrative  purposes.  There  are  likely  to  be  many  additional  relevant  subsystems. 
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Additionally,  although  they  are  listed  under  a  predominant  category,  many  of  the 
subsystems  may  exist  in  multiple  combinations,  integrated  vertically  6  horizontally- 
presenting  numerous  nodes  of  interaction  which  become  potentially  valuable  targets  rn  and 
of  themselves.  Those  subsystems  listed  under  the  non-military  categories  also  often  have 
an  undeniable  relationship  to  the  military.  Many  subsystems  are  in  fact  considered  "dual 
use."  Although  many  of  these  subsystems  appear  on  the  surface  to  be  strategic  in  nature, 
depending  upon  the  way  information  is  applied  (or  attacked),  they  may  actually  have  a 
dliTGC't  link  to  th©  opsrationa.!  and  tactical  levels. 

Electric  power  generation  and  distribution  is  a  case  in  point  for  potentially 

vulnerable  info-bases  with  multiple  ramifications: 


-  power  loss  nation/theater-wide  to  diminish  infrastructure  for  material  war 

sustainment,  or  to  bear  upon  the  population's  psyche  is  a  i.®'^®i/°^trational 

-  power  loss  in  an  area  of  operations  could  very  directly  affect  the  operational 

level  ^  jjj^gj.yption  of  power  to  a  building  or  platform  could  be  considered  on  the  tactical 

level  ^  j^ogg  that  disrupts  related  C3  subsystems  may  affect  activity  at  all  three 

levels 

--  and  so  on*  •  • 


Many  of  the  info-based  subsystems  of  Table  II  deserve  discussion  as  relevant 


targets: 

Finance.  Includes  banking,  stock  markets,  trade  &  credit  mechanisms.  The  Global 
Electronic  Market  Study  found  that  43  to  193  exchanges  worldwide  have  electronic  systems 
and  28  of  those  had  been  installed  between  1988  and  91.  Emerging  economies  are  giving 
great  emphasis  to  ground-up  electronic  market  design  and  implementation.’*  Information 
subsystems  exist  in  many  segments  of  overall  financial  systems.  Telecommunications  is 
key  to  financial  transfers.  When  the  New  York  World  Trade  Center  was  bombed  in  February 
1993,  the  neighboring  Mercantile  Exchange  suffered  electric  power  outage  which  resulted 
in  25%  of  the  exchange's  transactions  going  unprocessed  the  next  day.  "A  full  day  s 
closure  of  the  exchange  would  have  cost  the  oil  trading  community  $25  million  and  an 
extended  shutdown  would  have  been  devastating."’’  One  detailed  study  proposes  a  method 
for  determining  the  value  of  attacking  various  financial  systems.  For  example,  Iran's 
foreign  debt  and  imports-exports  appear  valuable,  while  China's  entire  financial  system 
appears  valuable.^* 

Electric  Power  Production  and  Distribution.  "To  ensure  reliable  service  to 
customers,  the  status  of  a  [typical]  power  system  is  monitored  in  an  energy  control 
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center  through  data  acquisition  and  computing  systems."  In  the  control  center  an  info 
subsystem  known  as  the  Energy  Management  System  (EMS)  assists  human  dipatchers  in 
monitoring,  analysis,  control,  power  distribution  scheduling,  etc.  Advanced  "knowledge- 
based"  information  systems  for  power  system  diagnosis  and  restoration  offer  additional 
capability.'’  Critical  functions  include  intelligent  alarm  processing,  electrical  state 
security,  and  system  diagnosis,  performed  either  centrally  or  at  substations,  and 
decision  and  control  for  power  restoration  and  remedial  action.  [The  number  of  alarms 
in  a  typical  power  grid  failure  can  be  in  the  hundreds.  Their  number  and  combinations  are 
nearly  unmanageable  without  computer  assistance  or  control.]  Interestingly,  among  the 
many  nations  implementing  these  knowledge-based  systems  is  the  "hotspot"  of  the  Federal 
Republic  of  Yugoslavia. “ 

oil  Produ^<-<nn  and  Distribution.  Knowledge-based  expert  information  systems 
[henceforth  "expert  systems"]  conduct  flow  control,  production  mixture  control,  pipeline 
leak  detection,  automated  route  changing,  parcel  tracking,  and  pipeline  startup  & 
shutdown  sequencing.  One  corporation,  Sd-scicon,  has  fielded  over  300  expert  supervisory 
control  and  data  acquisition  (SCADA)  packages  worldwide.  Also,  for  example,  distributive 
control  systems  (DCS)  are  well  noted  for  roles  in  the  production  process  by  incorporating 
SCADA  at  distances  over  60  miles  and  conducting  such  functions  as  supervising  wells  & 
valves,  water  injection,  output  flow  of  both  oil  and  natural  gas,  emergency  detection, 
separation  of  oil/water/gas,  supervising  tanker  loading,  and  monitoring  system  tempera- 

ture  &  pressure.^* 

T,-;,nsnnrt,at^on  r.oordlnation  &  Control.  Includes  air  traffic  control  (ATC) ,  roadway 
traffic  signals,  railroad  routing,  and  transportation  system  scheduling  and  manifesting. 
For  example,  regarding  ATC,  "the  technologies  for  air  traffic  communication,  navigation, 
surveillance  and  management  are  advancing  at  an  unprecedented  rate,"  including  satellite- 
based  surveillance,  multi-national  air-ground  data  links,  and  an  international 
aeronautical  telecommunication  network  (ATN) .  "Air  traffic  management  will  benefit  from 
increasing  automation.  Flow  management  personnel  will  use  improved  aircraft  positional 
information,  large  data  bases,  and  sophisticated  [computer]  models  to  better  predict 
congestion...  for  coping  in  real  time,"  for  both  airborne  and  surface  ATC.“ 

wat-er  Treatment /Purification  and  Distribution.  Expert  systems  are  currently 
beginning  development  to  assist  management  and  control  of  these  processes,  although  the 
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leap  from  the  oil  process  should  be  short.  Currently,  expert  systems  are  used  to 
simulate  the  water  process  for  diagnostic  assistance  and  training.  In  diagnostics,  all 
water  treatment  phases  are  touched— chemical  addition,  filtration,  chlorination,  etc.^ 
Fresh  water  is  a  "fundamental"  resource.  Some  recent  American  adversaries  are  very 
"water  poor"  and  getting  worse  due  to  population  growth,  including  Libya  (drawing  well 

over  300%  of  reusaible  supply] ,  Iraq,  and  Iran.^ 

Rnnniv/Manufartured  Goods  Distribution.  Computer  databases  are  key  to  output 
inventory  and  freight  shipping  management.  The  business  world  has  found  advanced 
information  systems  indispensible  to  responding  "just-in-time"  to  both  in-house  process 
and  customer  needs. “  Increasingly,  transponders  in  shipping  containers  are  tracked  vra 
satellite  to  aid  distribution  management.  Potential  is  emerging  for  information  system 
application  to  shipping  fleet  management  including  vehicle  allocation,  scheduling  and 

routing.^ 

Telecommunications  Systems.  These  include  many  advanced  means  of  transmission  for 
information  sharing  and  delivery.  In  general,  telecommunication  systems  can  be  viewed 
as  a  subsystem  or  enabler  of  a  larger  information-based  system,  or  as  the  main  system 
itself  when  considering  the  transmitted  information  as  the  primary  product  or  objective. 
Telecommunication  systems  can  vary  widely  in  scale,  scope,  and  type.  A  local  area 
computer  network  (LAN),  a  telephone  cellnet,  and  the  infamous  Internet  are  all  variants. 
Various  data  handling  schemes  are  employed  with  varying  levels  of  central  or  distributive 
information  routing  control  and  information  storage  &  servicing.  They  may  employ  various 
radio  frequencies  and/or  various  type  cabling.  Satellite,  microwave,  and  fiber  optic 
transmission  paths  are  all  growing.  Worldwide  infrastructure  growth,  a  boom  in 
international  network  privatization,  a  global  trend  toward  service  deregulation,  and 
quantum  leaps  in  communications  technologies  have  converged  in  a  telecommunications 

boom.” 

News  Media.  Really  a  set  of  related  organisms  that  are  significantly  enhanced  and 
enabled  by  a  wide  range  of  advanced  information  technologies.  The  backbone  of  news  media 
global  reach  is  the  global  telecommunications  infrastructure.  As  shown  in  Table  II,  the 
character  of  local  news  media  may  depend  on  who  controls  it,  to  what  degree,  and  what 
their  underlying  news  policy  objectives  are.  The  fundamental  idea  of  controlling 
information  to  yield  power  is  undeniably  embodied  in  the  concept  of  news  media; 
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therefore,  an  adversary's  relationship  to  news  media  and  it's  telecommunications  backbone 
must  be  considered  for  potential  impact  on  national  security  and  military  operations,  if 
not  as  an  outright  target. 

Information-Based  Cycles. 

-  Critical  development  and  sustaining  cycles  that  are  integrated  into  an 
adversary's  organization  are  often  enabled  by  information,  use  an  information  continuum, 
and  function  based  on  information  technologies.  Manufacturing  &  production,  R-&-D  & 
design,  training,  readiness,  and  materiel  maintenance  all  exemplify  this  type  of  cycle. 
These  may  entail  complex  systems  and  complicated  processes,  but  often  it  is  relatively 
easy  through  familiarity,  intelligence,  or  other  foreknowledge  to  identify  critical 
informational  nodes  and  their  technological  basis. “  As  a  very  basic  example,  it  has 
been  widely  reported  that  French  export  Exocet  missiles  were  designed  to  include  a  secret 
"trap  door"  in  the  guidance  program  that  would  allow  them  to  be  disabled  only  by  trusted 
agents.  It  would  be  highly  desireable  to  similarly  subvert  an  adversary's  weapon  systems 

during  it's  design  and/or  production  cycle. 

-  Many  critical  operational-tactical  cycles  exist  in  aggregated  or  netted 
platforms  and/or  other  information  systems  based  on  the  organism  model.  The  means  and 
methods  of  generating  a  coordinated  tasking  order 

is  one  example.  The  means  and  methods  of  coordinating  targeting,  positioning  and  launch 
of  mobile  theater  ballistic  missiles  (TBM)  is  another.  The  sensor-through-shooter 
information  loop  is  yet  another.  Similarly,  these  cycles  may  have  vulnerabilities  to 
information  attack. 

-  Combining  both  perspectives  leads  to  potential  for  actually  subverting  the 
development  or  preparation  of  these  info-based  op-tac  organisms. 

Platforms.  Essentially,  most  platforms  exist  on  the  tactical  level,  although 
flagships  and  headquarters  may  be  considered  higher.  Circumstances  like  coalescing  into 
operational  formations,  or  a  platform  delivering  operational  fires,  may  also  raise  their 
level.  Information  attacks  on  some  info-dependent  platforms  may  be  feasible.  Jane.ls 
guides  abound  with  worldwide  examples  of  combat  vehicles  and  subsystems  that  exploit 
information  technology  to  potential  great  advantage.  Many  may  also  be  vulnerable  as  a 
result.  These  vehicles  often  employ  drive-  or  fly-by-wire,  and  information  intensive 

the  spectrxim  of  dependence.  Most  include  a  data  link 


navigation  &  combat  systems  across 


inter-platform  networking  scheme.  Info-based  vital  subsystems,  for  example,  of  modern 
aircraft  also  include  electronic  fuel,  thrust,  inlet,  and  engine  controls.  Avronrcs 
averages  nearly  40*  of  the  cost  of  military  aircraft.*  The  increasingly  info-based 
automated  design  of  cockpits  (instruments,  flight  controls,  etc.)  offers  potential 
vulnerability.  A  recent  expert  report  indicates  that  pilots  often  don't  recognize  when 
the  automated  system  has  gone  terribly  awry. 


IW  TARGETEERING 

Potential  information-based  targets  like  those  presented  above  require  astute 
functional  understanding  for  useful  target  development.  The  first  requirement  is  to 
recognize  what  "type"  of  target /subsystem  or  combination  of  subsystems  exist  in  the 
overall  system.  Basic  target  types  are: 


-  an  information  system  proper,  normally  based  on  ^®?9ibleinforaation  technolo¬ 
gies,  with  specific  information  components  and  an  information  handling  design 


-  a  platform  with  an  embedded  information  subsystem,  with  or  without  immediate 
human  interface 


-  information  itself,  i.e.,  that  which  flows  through  a  tangible  information  system 
or  otherwise  affects  information  function  of  "info-consumers" 


-  an  info-consumer,  i.e.,  a  person  or  collective  organization  which  receives 
information  and  uses  it  to  form  action;  unless  direct  human  connection  occurs,  some 
variety  of  tangible  information  system  is  involved 


Tangible  information  systems  and  subsystems  are  of  predominant  interest,  since  they 
almost  always  provide  a  component  of  all  other  target  types.  Information  systems  can  be 
further  separated  into  four  sub-classifications: 

1)  communications  systems,  including  networking  apparatus 

2)  simple  data  management,  analysis,  or  display  systems 

3)  "knowledge-based  expert  systems"  which  can  judge  inputs  and  make  choices  based 
on  a  database  of  programmed—and  often  complicated  and  unique— ways  of  interpreting 
information 

4)  "control  systems"  which  control  some  physical  process  or  function 


These  classifications  imply  different  levels  of  development  along  the  information 
continuum.  Communications  systems  and  simple  data  handling  systems  represent  the  most 
basic  status  in  the  continuum— unconverted  information.  Expert  systems  represent 


information  converted  to  knowledge.  Control  systems  represent  some  level  of  conversion 
to  capability  for  action.  Generally  speaking^  the  degree  of  dependence  of  an  info-based 
function  is  inverse  to  the  degree  of  development  on  the  information  continuum.  Table 
III,  below,  represents  this  idea.  (As  will  be  shown  later,  dependence  is  a  factor  in  the 
value  of  an  information  system  as  a  potential  target.) 


Table  III.  Spectrum  of  System /Organism  Dependence  on  Info  Subsystem 


fully 

independent  - - 

/  /  / 

direct  human  simple  info  knowledge-based 

contact  handling  expert  system 

system 


fully 

- >  dependent 

/  / 
action-assist  control 

partial  auto  system 

system 


Understanding  target  info— system  design  and  characteristics  is  important  to 
assessing  the  factors  for  target  value  and  determination  of  useful  candidacy.  While  a 
more  detailed  discussion  is  offered  in  Appendix  A,  technical  comprehension  of  the 
candidate  target  should  be  acquired,  to  facilitate  standard  targeting  judgements  on 
relevance  and  usefulness  of  target  candidacy,  and  the  ability  to  access  and  attack  it. 
This  is  known  as  mapping  the  info  system  "topography”  (or  infosphere  topography  in 
whole) .  Facets  include; 

Is  the  target  info  system. . . 

-  isolated  or  networked  ? 

-  closed  operating  system  or  open  ? 

-  serial  processing  or  parallel  ? 

-  local  architecture  or  wide  ? 

-  centralized  function  or  distributed  ? 

-  fixed  or  mobile  ? 

-  electrically  self-powered  or  externally  fed  power  ? 

[  The  most  difficult  target  would  probably  be  one  which  is  isolated,  closed 
operating  system,  parallel  processed,  local  architecture,  centralized 
function,  mobile,  and  self-powered.] 

Are  critical  information  processing  factors  located  in... 

-  hardware/circuitry  ? 

-  the  operating  system  ? 

-  the  processing  program(s)  ? 

-  the  data  (while  in  transit,  or  stored  in  databases/files)  ? 

-  the  telecomms /network  paths  and  nodes  (including  hubs,  switches, 

and  routers)? 
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Assessing  target  value,  relevance  of  target  candidacy,  and  priority  of  attack  in  the 
operational  scheme  also  requires  a  comprehensive  examination  of  value-added.  This  is  a 
three  step  method: 

1)  First  determine  the  value  of  the  candidate  target's  information  basis, 
including  the  following  factors: 

-  Time-basis:  Time-based  components  of  value  are  often  critical,  including  its 
useful  endurance,  sensitivity  to  timely  delivery/presentation,  and  possible  necessity  for 
continuity  of  an  info  stream  over  time. 

—  Content :  Does  the  information  contain  what  the  info— consumer  needs  for 
converting  to  useful  knowledge? 

-  Quality:  Components  of  information  quality  include  timeliness,  objectivity, 
usability,  completeness,  and  accuracy.^ 

_  Reolacibilitv:  Can  the  system  restore  the  information,  circumvent  the 
disruption,  "self-heal",  draw  on  a  backup?  ...and  how  long  would  it  take?  Some 
distributive  or  parallel-processed  systems  have  the  capability  to  "self-heal"  or  reroute 
information  as  necessary. 

-  Dependence:  As  it  refers  to  functional  dependence.  Already  described  in  detail. 

-  Context:  Can  the  information  be  recognized  by  the  information  consumer  in  it's 
appropriate  context,  i.e.,  in  relation  to  other  applicable  information?  Does  xt  stand 
out  from  the  torrent  of  irrelevant  information? 


2)  Second,  determine  the  relevance  of  the  target  to  strategic  &  operational 
objectives  and  the  overall  operational  scheme,  including  the  following  considerations; 

-  Value  to  the  adversary  info-consumer's  strategic-operational  scheme 

-  Value  to  own  scheme  &  objectives,  e.g.  paths  to  centers  of  gravity 

-  "Time-match",  i.e.,  for  information  of  a  transient  nature,  does  it  meet  time- 
basis  requirements,  or  would  foregoing  the  information  not  matter  over  time? 

3)  Finally,  determine  accessibility  of  the  info-based  target.  This  returns 
logically  to  the  necessary  understanding  of  system  topography,  as  discussed  above,  and 
coupled  with  the  weaponeering  effort — determines  target  vulnerability  to  attack. 


IW  WEAPONEERING 

In  conjunction  with  the  targeteering  methodology,  weapons  must  be  matched  to 
targets,  delivery  methods  must  be  determined,  and  desired  effects  must  be  achieved.  This 
can  be  represented  by  a  seven  step  method: 
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1)  Determine  the  type  and  level  of  "damage"  desired,  including 
these  options; 

-  disrupt,  deny 

-  degrade 

-  deceive,  spoof  . 

-  accentuate,  clarify  (you  may  want  to  be  sure  the  enemy  has  certain 

information  for  psychological  purposes) 

-  shock 

-  destroy 

-  reconnoiter,  surveil,  collect 

2)  Determine  level  of  covertness  desired  and  risk  if  uncovered 

3)  Determine  acceptable  probability  of  "kill"  or  required  probability/reliability 
of  success 

4)  Analyze  potential  for  desired  or  undesired  information  fallout,  i.e.  side 
effects  such  as  cascading  degradation  in  a  system,  or  propagating  through  a  network 


5)  Consider  preferred  method(s)  of  action/inf luence,  including? 

-  software  (remote  entry  point) 

-  software  (local  entry  point;  maybe  delivered  by  covert  agents  or  forces) 

-  electromagnetic/radio  frequency  (EM/RF) 

-  mechanical  disruption  (e.g.  cut  a  cable) 

-  data  injection 

-  data  siphoning/extraction  (total  or  selective) 

-  data  reroute 

-  traditional  hard  kill  (conventional  weapons) 

-  unconventional  hard  kill  (e.g.  SOF  direct  action) 

-  traditional  C2W  (EW,  PSYOP,  MIJI,  etc.) 

6)  Assess  availability  of  weapon  and  delivery/application  of  resources 

7)  Match  combinations  of  weapons,  delivery  methods,  and  timing  to  the  target 

Among  all  availedsle  IW  weapons  &  methods  of  influence,  software  weapons  offer 

extraordinary  attack  potential  at  low  risk  and  low  cost."  Discussing  all  the 

possibilities  would  fill  a  book.  Appendix  B  provides  background  on  some  common  software 
weapons  like  worms,  viruses,  logic  bombs,  etc.  Software  weapons  can  be  tailored- 
multiple  options  and  permutations  are  a  strength  of  the  medium  and  can  be  stored  long¬ 
term,  or  created  "just-in-time."  Although  design  and  development  of  software  can  be 
highly  labor  intensive,  it  is  nearly  material  resource-independent ,  especially  when 
accomplished  on  desktop  PCs. 

One  especially  promising  possibility  is  attack  by  expert  systems  or  "intelligent 
agents"  (sometimes  called  "knowbots").  A  software  agent  is  a  program  that  can  operate 
autonomously,  carrying  out  tasks  without  direct  human  supervision.  These  could 
potentially  patrol  information  systems  and  networks,  searching  for  high  value  data, 
programs  or  systems,  absorbing  or  altering  information,  deploying  piggyback  software 
weapons — even  creating  other  agents,  and — remarkably — "learning"  and  adapting  to 
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unfamiliar  target  systems  or  target  changes. "Self-healing"  distributive  networks  may 
actually  negate  the  usefulness  of  conventional  precision-guided  munitions.  Software 

agen1:s  may  be  ideal  under  these  circumstances. 

Two  advanced  EM/RF  weapons  also  offer  offensive  IW  promise.  High  Power  Microwaves 
(HPM)  "have  the  adDility  to  enter  structures  via  a  slight  crack  or  seam.  They  will  even 
enter  a  metal  container  through  apertures  for  transmission  lines  or  sensor  ports,  and 
overload  or  short-circuit  a  single  critical  element  of  the  target  system,  which  is 
sufficient  to  render  it  useless."  The  main  drawback  of  HPM  weaponry  is  the  amount  of 
high  energy  and  power  density  required,  making  currently  available  designs  big  and 
heavy. “  DARPA  has  researched  the  development  of  "smart  microwaves,"  with  attributes 
that  could  damage  a  target,  other  than  by  high  power.  For  example,  high  repetition  rates 
or  shaped  pulsesmight  be  used.^  The  other  technology  that  displays  unique  potential  is 
Non-Nuclear  Electromagnetic  Pulse  (NN-EMP) .  Anticipated  EMP  generators  (deliverable  by 
a  variety  of  means)  would  create  ultra  wide  band  radiation  with  very  fast  rising  times, 
on  the  order  of  1  GHz  or  higher  frequencies.  EMP  induces  in  any  antenna,  cable, 
connector,  or  conductor,  a  high  voltage  pulse  that  causes  a  disruptive  surge,  conceivably 
strong  enough  to  destroy  electronic  components.  Prototypes  have  been  reported  at  defense 
labs,  and  cruise  missile  NN-EMP  warheads  are  speculated  have  been  speculated  to  exi-st.” 


MILITARY  MISSION  OPTIONS 

Information  Warfare  may  be  conducted  in  conjunction  with  traditional  physical 
warfare  or  as  a  separate,  stand-alone  approach.  In  either  case,  several  typical  military 
options  available  for  physical  force  could  be  used  in  IW,  including: 

-  Rin,;kade  or  Bmbaroo:  block  the  trans-border  or  pan-organization  transfer  of 
information,  for  example,  electronic  funds  transfers 

-  nemonstration:  show  a  belligerent  that  he  is  critically  Tmlnerable  to  IW  attack, 
e.g.,  take  down  his  neighborhood  power  grid  for  a  limited  period 

-  Raid:  conduct  a  precision  IW  attack  against  a  specific  information  target  or 
targets,  e.g.,  decouple  leadership  communications  from  the  organization 


-  Force  Entry:  conduct  a  coordinated  multi-faceted  IW  attack  agao^st  relevant 
information  systems,  e.g.,  choke  transportation  control,  disrupt  local  media,  turn  off 
intrusion  alarms,  subvert  supply  distribution  management,  etc. 
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THE  IW  OPERATIONAL  ENVIRONMENT 


A  key  paradox  will  dominate  the  warfare  environment  in  the  information  Age;  Either 
more  centrally  aggregated  or  more  disseminated  &  dispersed  information  will  be  possible. 
As  a  result,  complexity  will  significantly  increase  the  possibilities  in  the  following 
considerations  as  they  apply  to  the  entire  geo-social  context— that  is,  to  adversary, 
neutral,  and  friendly  organisms  and  methods; 

1)  control  can  be  either  more  centralized  or  decentralized 

2)  capabilities  can  be  more  precisely  customized  singularly  or  en  masse— not  just 
in  the  production  of  materiel,  but  also  in  application 

3)  coordination  can  be  conducted  in  time-based  or  info-based  fashion,  or  in  a 
complex  combination 

The  interaction  of  these  considerations  combine  to  create  a  transformed  operational 
context.  A  significant  outgrowth  is  already  apparent.  Because  "organisms"  or 
organizations  have  less  need  to  be  physically  aggregated,  widely  dispersed  and  diverse 
people  will  gain  increased  capability  to  coalesce  around  common  ideas  or  goals, 
paradoxically,  small  and  closely  located  organizations  will  also  be  given  unique  access 
to  diverse  global  information  and  the  global  scene.  Both  trans-national  and  sub-national 

organizati-ons/organisms  will  be  unusually  empowered. 

Some  trans-national  entities  already  leveraging  this  new  power  include  treaty 
organizations,  non-governmental  agencies,  corporations,  media  organizations,  environmen¬ 
tal  activists,  terrorist  organizations,  and  drug  cartels.  Sub-nationals  include  domestic 
political  factions,  insurgents,  criminal  groups,  provincial  and  communal  groups,  and 
tribes.  The  interaction  and  synergism  of  these  two  concurrent,  paradoxical  trends  could 
find  sub-national  groups  banding  together  trans-nationally.”  Global  bureaus  of  non¬ 
governmental  information  agents  already  exist  and  are  likely  to  proliferate.  The 
increased  complexity  and  speed  of  interaction  breed  spontaneity  and  a  heightened  lev 
of  activity,  which  in  return  feed  back  more  complexity.'*'  Army  Chief  of  Staff  General 
Gordon  Sullivan  describes  one  facet  of  this  phenomenon  as  "hyperdiversity."'"  This 
condition  poses  a  tremendous  and  fundamentally  significant  challenge  to  a  nation-state's 

security  apparatus. 

Furthermore,  not  all  corners  of  global  civilization  are  advancing  at  the  same  rate. 
Today  we  see  a  "tri-sected  world"  containing  societies  essentially  in  the  agrarian  stage, 
industrial  stage,  or  information-based  stage  of  development,  and  some  societies  with 


16 


vicarious  blends  of  elements  of  the  stages.**  Primarily  agrarian  societies  have  unique 
interests  and  newfound  ability  to  incorporate  some  information-based  capability  and 
function  for  both  domestic  and  global  leverage.  All  this  adds  not  only  to  the  complexity 
of  geo-social  interaction,  but  also  to  the  widely  varying  character  of  the  field  of 
conflict,  and  to  the  potential  for  strategic  and  operational  friction. 

The  infosphere  may  be  more  or  less  developed  in  certain  geographic  areas,  but  it 
is  enormous  and  advancing  continuously.  The  phenomenon  extends  well  beyond  the  "G7" 
nations.  "In  Hong  Kong,  600  of  the  city's  skyscrapers  are  already  wired  with  fiber 
optics  and  rate  as  'intelligent  buildings. '.. .Singapore's  leadership  has  vowed  to  make 
that  country  an  'intelligent  island'  by  2000. India's  public  sector  giant  Indian  Oil 
corporation  recently  entered  a  partnership  with  IBM  to  address  information  technology 
requirements  of  oil  refining  and  distribution.-*"  AT&T  does  business  in  more  than  200 
countries,  derives  over  50%  of  its  networked  computing  business  outside  the  U.S.,  and  has 
entered  a  joint  venture  to  build  an  international  telecomms  network  in  Ukraine  among  many 
other  overseas  development  projects."* 

in  1991,  the  United  Nations  created  the  NGONET  [NGO=  non-governmental  organiza¬ 
tions]  with  specific  concern  for  information  networking  in  the  southern  hemisphere."* 
In  Latin  America,  where  only  7%  of  the  population  has  access  to  a  telephone,  "the  demand 
for  communications  has  created  the  fastest  growing  cellular  market  in  the  world.""’  The 
Federal  Republic  of  Yugoslavia  has  deployed  advanced  expert  systems  in  management  and 
control  of  its  electric  power  grid."*  A  fiber  optic  network  connecting  major  science 
research  and  cultural  institutions  is  being  developed  in  western  Russia."’  Oman's 
national  oil  terminal  is  described  as  "a  windowless  room  [the  'spigot  of  the  nation  s 
prosperity')  filled  with  computers  and  pressure  gauges  that  control  the  flow  of  Oman's 
crude  oil  through  two  floating  buoys  a  mile  offshore  where  tankers  load."*®  In 
Blacksburg,  Virginia — an  "electronic  village"  sponsored  by  Bell  Atlantic  a  bank  branch 
manager  keeps  in  touch  with  a  buddy  in  Iran  "on-line."**  During  the  UNOSOM  II  operation 
in  Somalia,  while  American  special  forces  pursued  him,  Aidid's  scouts  reported  American 
movements  via  cellular  phones.**  Mexico's  insurgent  Zapatistas  have  routinely  faxed  open 
communiques  from  remote  areas  with  noteworthy  political  effect.** 

China  has  embarked  on  an  amazing  set  of  information  development  projects.  Over  the 
next  decade,  China  intends  to  spend  over  $100  billion  on  deploying  telecom  equipment. 
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China's  Golden  Bridge  Project  will  eventually  provide  a  network  into  30  provinces, 
hundreds  of  cities,  thousands  of  businesses,  plus  key  utility  systems  such  as  the  Daya 
Bay  Nuclear  Power  Station.  The  Golden  Customs  Project  will  automate  customs  checks  and 
international  funds  transactions  to  support  foreign  trade  enterprise.  The  Golden  Card 
Project  will  attempt  to  establish  a  national  electronic  money  system  with  national  credit 
and  cash  cards.**  The  Golden  Enterprise  Project  will  link  commercial  and  industrial 
firms  across  the  country,  and  provide  business  and  industrial  data  for  central  and  local 
government  decisionmaking.**  On  13  April  1995,  it  was  announced  that  China's  public 
telecommunications  system  joined  the  Internet.*’  China's  explosive  information 
technology  growth  is  also  observed  in  her  military  development.  For  example,  China  s 
upgraded  Luda-class  destroyers  incorporate  advanced  information-based  combat  direction 
and  fire  control  systems  and  new  surface-to-surface  missiles  very  similar  to  the 
Exocet.**  A  Chinese  purchase  of  Israeli  Elta  EL/L-8300  SIGINT  systems  for  airborne 
patrol  and  surveillance  is  pending.** 

These  salient  cases  convincingly  portray  the  infosphere  as  globally  pervasive  and 
the  geo-social-technical  tapestry  as  woven  evermore  tightly,  with  more  and  faster 
interaction,  and  ever  greater  complexity. 

ORIENTING  FOR  OFFENSIVE  INFORMATION  WARFARE 

TO  achieve  maximum  military  power  and  effect,  IW  efforts  must  be  fully  integrated 
into  the  strategic  and  operational  schemes.  IW  actions  and  purposes  must  be  sequenced, 
synchronized,  and  deconflicted  with  physical  and  psychological  actions  and  purposes. 
Shares  of  the  overall  IW  effort  should  be  apportioned  among  the  three  IW  roles,  i.e.s 
as  an  enabler/enhancer  of  physical  force;  in  direct  attacks  against  adversary  will;  and 
against  significant  adversary  information  not  directly  related  to  the  physical  clash. 

The  CINC  and  his  staff  must  undertake  a  comprehensive  planning  &  preparation  effort 
for  anticipated  IW.  The  J2  — assisted  greatly  by  the  J6 —  must  be  the  focal  point  for 
"information  intelligence  prep  of  the  battlefield,"  wherein  the  definition  of  the  battle¬ 
field  has  new  meaning,  and  mapping  the  adversary's  information  topography  assumes 
critical  advance  importance.  J3  will  necessarily  take  the  lead  on  target  selection  and 
prioritization,  assisted  by  the  J2  and  J6  in  understanding  the  character  of  candidate 
targets.  Finally,  J3  will  advance  IW  target  recommendations  to  a  Joint  Targeting  Board 
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(now  dealing  with  physical  and  information  attacks),  which  will  integrate  them  xnto  a 
composite  Joint  Integrated  6  Prioritized  Target  List  (JIPTL)  for  coordination  and 
deconf liction. 

The  national  intelligence  agencies  must  similarly  undertake  strategic-level 
information  prep  and  mapping  of  the  info  topography,  coordinating  with  CINCs'  J2/JIC  on 
collection  objectives  and  resources,  and  sharing  of  IW-related  intelligence.  The 
national  intelligence  establishment  should  also  seriously  consider  a  strategic-level 
Integrated  Information  Operations  Plan  (HOP).® 

Service  IW  Activities . should  serve  as  the  centers  for  warfighting  expertise.  The 
CINC  and  any  pre-designated  or  standing  CJTF  staffs  should  have  an  officer  dedicated 
solely  to  IW  under  the  cognizance  of  J3.  When  necessary,  the  Service  Activities  should 
deploy  Joint  IW  Augmentation  Cells  to  these  staffs.  At  minimum,  primary  subspecialties 
in  IW  should  be  established  for  these  key  personnel.  Eventually,  IW  should  become  a 
designated  warfare  specialty /MOS  in  all  the  Services. 

In  the  not-too-distant  past,  the  O.S.  armed  forces  embraced  some  previously  non- 
traditional  force  options  that  have  transformed  warfare.  The  unique  nature  of  airpower 
altered  traditional  military  thinking  about  the  limits  of  time  and  space,  and  provided 
powerful  assymetric  leverage  against  targets  on  all  levels  of  war.  The  emergence  of  an 
extraordinary  focus  on  special  operations  recognizes  the  unique  nature  of  SOP  to  apply 
unusual  methods  of  power,  across  the  levels  of  war,  often  with  effects  disproportionate 
to  the  relatively  small  amount  of  effort  used.  The  U.S.  defense  establishment  should 
embrace  a  similarly  holistic  view  of,  and  fully  developed  approach  to.  Information 
Warfare — going  far  beyond  C2W.  Both  airpower  and  SOP  provide  useful  doctrinal  and 
functional  insight  into  conducting  IW.“  It  should  be  possible  to  analyze  their 
respective  approaches  to  the  range  of  military  operations  and  accrue  a  suitable  start-up 
model  for  IW  organization,  training,  and  operational  conduct. 

The  global  commercial  sector  is  fueling  the  development  &  proliferation  of  advanced 
info  technologies,  which  in  turn  is  fueling  the  geo-social  transformation.  Very 
fortunately,  free  world  business — currently  led  by  United  States  firms  constitute 
"partnership"  opportunities  for  expertise  &  understanding  of  the  infosphere,  and  to 
acquire  and  leverage  cutting  edge  information  technologies  suitable  to  IW.  Relevant 
access  should  be  uniquely  available  to  the  U.S.  armed  forces  at  low  technical  risk  and 
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relatively  low  cost.  The  Defense  Department  must  fully  capitalize  on  this  phenomenon  in 
development  of,  and  orienting  for.  Information  Warfare. 

CONCLUSIONS t  MAKING  THE  ESSENTIAL  CONNECTION 

In  the  throes  of  the  Information  Age,  it  is  probable  that  we  are  reaching  what 
Peter  Drucker  calls  the  second  level  of  new  knowledge  or  technology.®  In  the  first 
level,  technology  is  applied  to  improve  existing  processes  and  products.  In  the  second 
level,  technology  is  exploited  to  develop  new  and  different  processes  and  products.  This 
is  probably  the  case  with  Admiral  Owens'  "emerging  system  of  systems"  (ISR  +  C4I  + 
PGMs).°  Drucker's  third  level — by  no  means  inevitable — is  true  innovation  on  a  holistic 
level,  based  on  a  whole  new  way  of  thinking.  U.S.  Navy  Commanders  James  FitzSimonds  and 
Jan  vanTol  apply  a  similar  approach  to  conceptualize  Revolutions  in  Military  Affairs 
(RMA) .  They  posit  that  three  preconditions  are  common  to  full  realization  of  any  RMA: 
technological  development,  doctrinal  (or  operational)  innovation,  and  organizational 
adaptation. «  "It  is  the  synergistic  effect  of  these  three  preconditions,"  they  write, 
"that  leads  to  an  RMA."  This  correctly  implies  that  RMA  involves  choices  that  it  is  not 
a  predestined  occurrence,  regardless  of  the  technologic  and  surrounding  social  context, 
but  ultimately  dependent  upon  its  embodied  human  interaction.  Any  vision  of  unique 
future  capacity  for  military  power  through  Information  Warfare  must  absolutely  consider 
that  fundamental  fact.  Innovation  will  be  dependent  on  human  response,  even  more 
especially  in  the  context  of  the  fundamental  geo-social-technical  nature  of  IW.  A  "high 
tech  -  high  touch"  match  must  be  achieved.®  Making  the  necessary  connection  between 
technology  and  human  response  in  the  complex  and  accelerated  context  of  a  transformed 
world  will  be  the  key  to  making  the  essential  connection  between  information  and  possible 
revolutionary  new  military  power  for  national  security. 
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APPENDIX  A:  Understanding  the  Information  Topocfraphy 


Kvnert  Svsi-^mg  s  Applications.  Expert  systems  can  be  both  targets  and  weapons.  Expert 
systems  "automate  repetitive,  tedious,  or  overly  complex  processes."'  They  are  special- 
purpose  computer  programs  that,  given  a  reliable,  explicit  knowledge  base,  are  expert 
in  some  narrow  problem  area.='  Typical  uses  of  expert  systems  include:  control, 
diagnosis,  interpretation,  prediction,  design,  simulation,  repair,  training,  and 
planning.  For  these  purposes,  expert  systems  are  being  widely  incorporated  in  large 
complex  systems  (including  computational,  communications,  and  mechanical  systems). 
Typical  expert  systems  are  primarily  automated  management  [i-e.,  function  coordination] 
information  systems  (MIS)  (e.g.  Energy  Management  System  (EMS),  Traffic  Signal  Control 
system]  or  Supervisory  Control  and  Data  Acquisition  (SCADA).  These  systems  are 
increasingly  used  with  great  dependence  in  key  civil  and  commercial  systems.  Currently, 
electric  power  systems  and  oil  6  chemical  production  &  distribution  are  heavily  invested 
in  expert  systems  worldwide.  Introduction  is  increasingly  seen  in  water  systems, 
transportation  traffic  control,  and  financial  mechanisms  auch  as  trading.  Although  some 
expert  systems  are  given  full  control  authority,  some  others  retain  a  man-in-the-loop 
to  handle  final  decisions  on  judgements  presented  by  the  expert  system.  Dependence  and 
overall  system  integrity  may  not  be  closely  related  to  this  fact,  since  corrupting  the 
expert  system  can  have  devastating  effect  regardless. 


Tel  ecommuni  rat  Ions /networking  architecture  S  applications.  Large,  dispersed,  or  diverse 
systems  use  networking  to  tie  computers  (and  "organisms"]  together.  Networking  employs 
a  variety  of  telecommunications  apparatus  and  techniques.  Media  of  transmission  are 
important  to  recognize  (e.g.  electronic,  optical,  RF)  since  this  is  one  path  to  access 
a  networked  target.  Routing  and  switching  architecture  is  also  key  since  this  creates 
potential  sets  of  vulnerable  nodes.  [But  beware  the  "self-healing"  properties  of 
appropriately  designed  distributive  systems  which  are  capable  of  rerouting  to  circumvent 
disruption.]  Furthermore,  "operating  a  complex  and  large  scale  computer  network  or 
collection  of  computer  networks  is  a  complicated  enterprise.  As  the  number  of  devices 
involved  in  the  system  increases,  the  systems  complexity  grows  exponentially.  Detecting 
and  repairing  software,  machine  and  communications  link  failures  are  extremely 
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difficult. 
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naha  manaoem^^nt  6  applications.  This  includes  data  monitoring,  processing,  organizing, 
relating,  calculating,  combining,  and  displaying,  among  other  functions.  Digital  data 
is  the  computer  language  of  information.  Data  will  exist  in  various  stages  of 
processing,  as  well  as  comprising  the  program(s)  and  operating  system  (OS)  instructions 
themselves.  With  respect  to  processing,  data  is  often  sensed  automatically  (sometimes 
by  remote  peripheral  devices],  relayed  from  another  computer,  or  input  by  a  human 
operator.  The  data  will  exist  in  various  databases  for  access  by  the  program(s)  or  OS. 
Databases  take  various  forms  and  a  knowledge  of  the  target's  database  form  is  important 
if  intending  to  subvert  it,  particularly  if  covert  or  deceptive  measures  are  desired  to 
endure  without  operator  alertment  to  data  corruption.  Programs,  OSs,  and  databases 
usually  reside  in  non-volatile,  long  term  memory.  In-process  data  is  that  data  which 
is  replicated  and  manipulated  for  computation  (processing)  and  usually  resides  in 
volatile,  short  term  memory.  Output  data  is  generally  sent  to  a  peripheral  device 
designed  specifically  for  human  recognition  and  utility,  or  is  sent  along  to  another 
computer.  Because  of  the  long  term  nature  of  programs,  OSs,  and  databases,  all  are 
potentially  good  value  targets.  OSs  are  often  widely  understood,  since  they  are  usually 
widely  available  commercially.  Corrupting  them  could  disrupt  or  deny  information  use, 
but  deception  is  unlikely  since  inoperability  will  likely  be  apparent  to  the  user. 
Programs  will  be  useful  targets  if,  as  is  common,  they  conduct  repetitive-type 
functions/computations—thus  providing  a  degree  of  predictability  in  targeting  and  a 
reasonable  expectation  of  attack  outcome.  Program  access  and  understanding  may  be  more 
difficult  if  it  is  locally  designed  and  held.  Databases  and  stored  data  files  may  be 
the  target  gold  mine,  but  require  significant  reconnaissance  to  understand  what  they 
represent,  how  they  are  organized,  and  what  they  are  used  for,  and  therfore  may  also 
r6(^lre  a  knowledge  of  the  prograin(s)  they  relate  to. 

T.^  mi  ted  functi-on  micro-comouters  or  microchips,.  These  narrowly  functional  subsystems, 
possibly  even  with  very  narrowly  defined  expert  systems  in  residence,  often  exist  to 
conduct  only  a  few  specific  tasks— Consider  the  microchips  in  most  modern  automobiles 
and  the  limited  set  of  tasks  they  accomplish,  like  regulating  carburation,  ignition,  and 
centrally  managing  a  few  key  engine  performance  parameters.  Similar  micro-computers 
are  often  employed  at  remote  grid  nodes,  where  flow  of  anything  from  oil  to  information 
must  be  sensed  and  routed.  These  micro-computers,  although  often  operating 


independently,  also  usually  feed  sensed  data  back  to  a  central  server  computer  for 
overall  grid  or  network  management. 
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APPENDIX  B; 


Information  Warfare  Arsenal. 


Definitions  are  quoted  or  paraphrased  primarily  from  Julia  Ryan,  gffenflya  lD{°rmatiPl. 
u-e.--.  donoent  Exploration.  CIM  361,  (Alexandria,  VA=  center  for  Haval  Analyses,  Jul 
19941.  wushou  Chou,od.,  cnmnuter  Communioat.jongi  Ydlunia  H  Prentice 

Hall,  1983)  pp  370-373,  provided  definitions  of  masquerading  and  active  eltetapplng. 

Winn  schwartau,  - - -  warfare,  chags  on  the  Hlectronlc  Superhighway,  (HV= 

Thunder's  Mouth  Press,  1994)  also  provides  interesting  twists  on  the  subject. 


....ret.nnlno.  Involves  attaching  an  unauthorised  device  ,  such  as  a  computer 
terminal,  to  a  communications  circuit  for  the  puproee  of  accessing  data  for  collection, 
surveillance,  modification  or  selective  disruption. 


rnvprt  nine.  This  is  a  communications  channel  that  is  usually  hidden  in  a  informati 
handling  or  telecommunications  system  that  is  unexpected  by  the  user,  but  exists  usually 
by  exploiting  a  design  flaw.  It  may  allow  information  to  be  transferred  in  unintended 
ways,  including  providing  access  for  malicious  software  or  for  covertly  retrieving  data 

or  siphoning  information  flow. 

n...  m.n,u„lsf.ion.  Vsrlous  ways  to  accasa  stored,  la-process  or  flowing  data  provide 
a  means  to  alter  that  data.  Altered  or  manipulated  data  can  be  used  to  great  effect  In 
deception,  degradation,  or  Information  accentuatlon/elarlf Icatlon,  among  others. 

_ _ tic  oulse  weapons.  HMP  Is  a  natural  by-product  of  nuclear  explosions,  but 

may  be  deliberately  produced  by  non-nuclear  devices.  Including  the  use  of  conventional 
explosives  to  provide  power  generation.  EMP  weapons  may  be  large  long-term  generators, 
or  one-time  use  bombs.  The  electromagnetic  nature  of  Information  systems  make  them 
susceptible  to  EM  disruption  or  damage. 


Flaws.  Software  errors, 
measures.  Flaws  may  be 


intentional  or  not,  that  allow  access  past  designed  protection 
introduced  in  the  software  or  information  development  cycle, 
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could  be  designed  and  emplaced  by  a  local  covert  agent,  or  might  be  inserted  by 
malicious  software. 

Microwaves.  HPM  are  a  type  of  radio-frequency  (RF)  energy  transmitted  at 
intense  power  levels.  HPM  can  effect  the  electromagnetic  composition  of  an  information 
system  in  ways  similar  to  EMP.  Advanced  research  is  examining  ways  to  specify  HPM  wave 
characteristics  tailored  to  specific  info  targets. 

mtelliaent  aoent.  Knowledge-based  expert  systems  that  may  puposefully  navigate  through 
an  information  system,  patrolling  it,  searching  for  specific  data  or  program  functions, 
then  retrieving,  modifying  or  otherwise  subverting  information.  Some  intelligent  agents 
may  have  the  capability  to  "learn"  and  adapt  to  unfamiliar  information  systems  or 
changes  in  the  target  system  or  operating  environment. 

T.ncie  bomb.  A  piece  of  computer  code  buried  within  a  system,  that  executes  when  a 
specific  system  state  is  realized.  For  example,  it  could  be  buried  within  a  program 
that  checks  for  the  presence  of  a  piece  of  data  (like  a  user's  name  or  password)  and  is 
set  to  "explode"  (deliver  its  malicious  effects)  when  the  specified  logic  state  is 
recognized  (the  user's  password  is  entered). 

T.noic  torpedo.  A  variation  on  the  virus,  more  closely  related  to  the  intelligent  agent. 
The  logic  torpedo  "homes"  on  a  specific  information  subsystem  and/or  a  specific  piece 
of  infomation,  then  delivers  viral-like  effects. 

Masmieradina.  Involves  attempts  to  gain  access  to  an  information  system  by  posing  as  an 
authorized  user. 

TEMPEST  devices.  TEMPEST  is  the  study  and  control  of  unintentional  electronic  signals 
emitted  from  information  systems.  TEMPEST  devices  can  be  designed  to  sense  and  exploit 
this  electronic  leakage.  Examples  of  include  exploiting  info  system  clock 
synchronization  for  other  adversary  systems,  or  using  the  known  clock  timing  to 


synchronize  an  IW  response* 


Time  bomb.  Similar  to  the  logic  bomb,  but  executes  at  a  specific  time  rather  than  logic 
state. 

Time  weapon.  These  weapons  aim  to  disrupt  the  computer's  clock  to  disrupt  or  alter 
synchronization,  affecting  internal  or  external  data  communication. 

Tr^n  door.  A  hidden  software  or  hardware  mechanism  that  permits  system  protection  to 
be  circumvented,  normally  activated  in  some  nonapparent  manner.  Trap  doors  are  commonly 
intentionally  designed  into  software  to  permit  correction  of  unanticipated  bugs.  These 
trap  doors  may  be  subject  to  compromise;  others  may  be  maliciously  created  by  a  covert 

agent . 

T^n^.n  horse.  A  computer  program  with  an  apparently  or  actually  useful  function,  but 
with  additional  malicious  functions.  For  example  a  database  management  program  may  have 
a  Trojan  horse  that  deletes  or  alters  all  sets  of  data  related  to  a  particular 
information  characteristic. 

Viruses.  Viruses  are  programs  that  stealthily  infect  other  programs,  self-replicating 
and  spreading  within  a  computer  or  network,  with  potential  to  corrupt  all  resident  data. 
Typically  small,  they  are  difficult  to  detect.  In  fact,  some  of  the  more  recent  versions 
have  active  anti-detection  protection  measures.  Viruses  may  be  encrypted,  compressed, 
or  polymorphic  to  rduce  probability  of  detection,  or  to  make  countermeasures  more 

difficult. 

worms.  Similar  to  viruses,  worms  are  self-replicating,  but  not  parasitic  (i.e.,  they 
don't  attach  to  other  programs)'.  As  demonstrated  dramatically  by  the  "Internet  Worm"  of 
1988,  they  can  deny  legitimate  users  access  to  systems  by  overwhelming  those  systems 
with  their  progeny.  Worms  attack  availability,  whereas  other  weapons  may  attack  the 
integrity  of  data  or  compromise  confidentiality. 
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